ignore_group_members (bool)
Do not return group members for group lookups.
If set to TRUE, the group membership attribute is not requested from
the ldap server, and group members are not returned when processing group
lookup calls, such as getgrnam(3) or
getgrgid(3). As an effect, “getent group $groupname” would return
the requested group as if it was empty.
Enabling this option can also make access provider checks for group
membership significantly faster, especially for groups containing many members.
This option can be also set per subdomain or inherited via
subdomain_inherit.
Default: FALSE
Regards,
John
--
John Hodrien (he/him)
Principal Teaching and Research Support Specialist, School of Computer Science
2.22 Bragg Building, University of Leeds
________________________________
From: None via sssd-users <sssd-users@lists.fedorahosted.org>
Sent: 22 July 2025 02:05
To: sssd-users@lists.fedorahosted.org <sssd-users@lists.fedorahosted.org>
Cc: chris.p...@rexconsulting.net <chris.p...@rexconsulting.net>
Subject: [SSSD-users]Re: SSSD with rfc2307bis causes thousands of concurrent
LDAP queries, triggering OpenLDAP flow control
CAUTION: External Message. Use caution opening links and attachments.
On 7/21/25 5:53 PM, "Christian, Mark via sssd-users"
<sssd-users@lists.fedorahosted.org> wrote:
> This is a common topic covered throughout the sssd mail archives.
> Configure your client to not enumerate groups by adding the following
> to your sssd.conf.
Hi Mark,
Thanks very much for your suggestion, but that is not my problem. As you can
see from the sssd.conf I attached to my original post, I already have
"enumerate = false".
Chris
--
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.fedoraproject.org%2Fen-US%2Fproject%2Fcode-of-conduct%2F&data=05%7C02%7Cj.h.hodrien%40leeds.ac.uk%7Ca25add0692c348e0e9cf08ddc8bbe6b1%7Cbdeaeda8c81d45ce863e5232a535b7cb%7C0%7C0%7C638887431547376733%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=8Bdo2eACSsseaNb2Qalph5DQO0nRYAuq333ekIZFnEI%3D&reserved=0<https://docs.fedoraproject.org/en-US/project/code-of-conduct/>
List Guidelines:
https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Ffedoraproject.org%2Fwiki%2FMailing_list_guidelines&data=05%7C02%7Cj.h.hodrien%40leeds.ac.uk%7Ca25add0692c348e0e9cf08ddc8bbe6b1%7Cbdeaeda8c81d45ce863e5232a535b7cb%7C0%7C0%7C638887431547399002%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=KvujL3tFv8plMg4VW%2FBZc0zCE9uJCOJ4tOJTNiUV754%3D&reserved=0<https://fedoraproject.org/wiki/Mailing_list_guidelines>
List Archives:
https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.fedorahosted.org%2Farchives%2Flist%2Fsssd-users%40lists.fedorahosted.org&data=05%7C02%7Cj.h.hodrien%40leeds.ac.uk%7Ca25add0692c348e0e9cf08ddc8bbe6b1%7Cbdeaeda8c81d45ce863e5232a535b7cb%7C0%7C0%7C638887431547414983%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=JBFo3m3qLSpLTSl6JpqFN42uTi9ujsmzQcNBdr3kAUk%3D&reserved=0<https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org>
Do not reply to spam, report it:
https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpagure.io%2Ffedora-infrastructure%2Fnew_issue&data=05%7C02%7Cj.h.hodrien%40leeds.ac.uk%7Ca25add0692c348e0e9cf08ddc8bbe6b1%7Cbdeaeda8c81d45ce863e5232a535b7cb%7C0%7C0%7C638887431547430340%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=FvNGYJ1KaGwM4Lln%2BJwxHglWIbeLWTCBiHsgww6SbnM%3D&reserved=0<https://pagure.io/fedora-infrastructure/new_issue>
--
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
